{"id":"https://openalex.org/W7171391727","doi":"https://doi.org/10.48550/arxiv.2607.22024","title":"Agent Security Needs Redefinition through a Holistic Framework","display_name":"Agent Security Needs Redefinition through a Holistic Framework","publication_year":2026,"publication_date":"2026-07-24","ids":{"openalex":"https://openalex.org/W7171391727","doi":"https://doi.org/10.48550/arxiv.2607.22024"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.22024","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.22024","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.22024","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119968245","display_name":"Vincent Siu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Siu, Vincent","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143685603","display_name":"Jingxuan He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Jingxuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026589029","display_name":"K A Montgomery","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Montgomery, Kyle","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143717794","display_name":"Zhun Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Zhun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5143673339","display_name":"Chenguang Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Chenguang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5143730834","display_name":"Dawn Song","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Song, Dawn","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.515500009059906,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.515500009059906,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.16619999706745148,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.05979999899864197,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ask-price","display_name":"Ask price","score":0.5770999789237976},{"id":"https://openalex.org/keywords/operationalization","display_name":"Operationalization","score":0.5026000142097473},{"id":"https://openalex.org/keywords/framing","display_name":"Framing (construction)","score":0.4921000003814697},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.4645000100135803},{"id":"https://openalex.org/keywords/conflation","display_name":"Conflation","score":0.44830000400543213},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.43459999561309814},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.38260000944137573},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.38040000200271606}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6205000281333923},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6105999946594238},{"id":"https://openalex.org/C90329073","wikidata":"https://www.wikidata.org/wiki/Q914232","display_name":"Ask price","level":2,"score":0.5770999789237976},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5444999933242798},{"id":"https://openalex.org/C9354725","wikidata":"https://www.wikidata.org/wiki/Q286017","display_name":"Operationalization","level":2,"score":0.5026000142097473},{"id":"https://openalex.org/C169087156","wikidata":"https://www.wikidata.org/wiki/Q2131593","display_name":"Framing (construction)","level":2,"score":0.4921000003814697},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.4645000100135803},{"id":"https://openalex.org/C130440534","wikidata":"https://www.wikidata.org/wiki/Q14946528","display_name":"Conflation","level":2,"score":0.44830000400543213},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.43459999561309814},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.38260000944137573},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.38040000200271606},{"id":"https://openalex.org/C187029079","wikidata":"https://www.wikidata.org/wiki/Q958679","display_name":"Cognitive reframing","level":2,"score":0.3756999969482422},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.3718999922275543},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.3671000003814697},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.3059000074863434},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.2957000136375427},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.2953000068664551},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2797999978065491},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.2667999863624573},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.26249998807907104},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C34974158","wikidata":"https://www.wikidata.org/wiki/Q131257","display_name":"Intellectual property","level":2,"score":0.2531999945640564}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.22024","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.22024","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.22024","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.22024","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.8197416663169861,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Agent":[0],"security":[1,32,110,116],"is":[2,33,89],"widely":[3],"treated":[4],"as":[5],"a":[6,24,35,56,61,98,105,170],"question":[7],"about":[8],"action":[9,88,151],"content.":[10,112],"Defenses":[11],"ask":[12,19],"whether":[13,20,149],"an":[14,21,91],"instruction":[15],"looks":[16],"malicious.":[17],"Benchmarks":[18],"agent":[22,31],"performs":[23],"harmful":[25],"sounding":[26],"action.":[27],"\\textbf{We":[28],"argue":[29],"that":[30,39,120,153],"fundamentally":[34],"contextual":[36,115,194],"problem,":[37],"and":[38,67,84,124,206],"the":[40,68,73,86,103,129,137,142,188],"current":[41],"content":[42,69],"based":[43],"framing":[44],"systematically":[45],"misdefines":[46],"it.}":[47],"A":[48],"command":[49],"to":[50],"``delete":[51],"user":[52,93],"data''":[53],"might":[54],"be":[55,125],"routine":[57,99],"administrative":[58],"request":[59,96],"or":[60],"prompt":[62,167],"injection":[63,80,168],"attacking":[64],"production":[65],"systems,":[66],"alone":[70],"cannot":[71],"distinguish":[72],"two.":[74],"Authorization":[75,133,172],"context":[76],"can.":[77],"Across":[78],"every":[79],"task":[81],"in":[82,97],"AgentDojo":[83],"WASP,":[85],"same":[87],"one":[90],"authenticated":[92],"would":[94],"plausibly":[95],"workflow,":[100],"which":[101,197,201,207],"makes":[102],"conflation":[104],"structural":[106],"property":[107,189],"of":[108,179],"evaluating":[109,180],"through":[111,117],"We":[113],"operationalize":[114],"four":[118],"properties":[119],"must":[121],"hold":[122],"jointly":[123],"evaluated":[126],"continuously":[127],"across":[128,160],"agent's":[130,143],"trajectory.":[131],"Source":[132,171],"asks":[134],"who":[135],"issued":[136],"command.":[138],"Task":[139],"Alignment":[140,147],"specifies":[141],"authorized":[144],"objective.":[145,154],"Action":[146],"evaluates":[148],"each":[150],"serves":[152],"Data":[155,181],"Isolation":[156],"governs":[157],"information":[158],"flows":[159],"privilege":[161],"boundaries.":[162],"Under":[163],"this":[164],"reframing,":[165],"indirect":[166],"becomes":[169],"violation.":[173],"Snapshot":[174],"benchmarks":[175],"are":[176,185,199],"structurally":[177],"incapable":[178],"Isolation.":[182],"Existing":[183],"defenses":[184,198],"reorganized":[186],"around":[187],"they":[190],"actually":[191],"approximate.":[192],"The":[193],"reframing":[195],"changes":[196],"coherent,":[200],"evaluations":[202],"measure":[203],"something":[204],"useful,":[205],"attack":[208],"patterns":[209],"evaluation":[210],"can":[211],"see":[212],"at":[213],"all.":[214]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-28T00:00:00"}